We have multiple IIS servers throughout our domain. We are constantly running into the issue where the GPO overwrites the local account setting, which is default by design. MS Article 275167 states 3 resolutions. Option one is to run iisreset, which our OPS dept is tired of. Option two...more >>

I'm trying to lock down the connection strings on our web servers and opted to go with .UDL files because they will be accessible from both Classic ASP and ASP.NET pages. They will also be stored outside of the webroot which should make them easier to restrict permissions in this environment an...more >>

Hello NG, I am running IIS on Win2k Adv Server + SP4 + .Net framework 1.1 my problem is as following -- I have default website and some other sites on the same iis (with diff port numbers) We have a domain but this server is not a part of any domain but on same network (intranet) When...more >>

Hi there, Can anyone give me a quick tutorial on creating a self-signed client certificate in win2K3 / IIS6, please? I have just been handed a project with a dealine of uesterday that requires client certificate authentication. Any help is greatfully accepted. TIA Marc....more >>

Hi there everyone I installed IIS on a server and when trying to to see if the server is started I get the following error. "Unexpected error 0x8ffe2740 occured". Any ideas? Granville ...more >>

Win2003, IIS6. Under "Internet Information Services/Web Sites" snap-in, I've created a "Mysite" site. If I click "Properties", "Web Site" tab, I see the following information: TCP Port=8080 SSL=443 I published this site via ISA 2004. In ISA I setup a web listener to "listen on port ...more >>

Folks, Maybe someone can help me out here. I'm working on an ASP web application on a w2k server with iis 5. The application dynamically creates folders and uses adsi to create local windows groups that have access to these folders. Because the group 'authenticated users' is member of one ...more >>

HI Guys. I hope you can help me out! I've poseted a similar question on "inetserver.asp.general" a couple of days ago, but I think I'm gonna have better luck here since it's more of a security issue, than a programming issue... Here's the scenario: 2 Windows 2000 servers and one workst...more >>

Hi - i recently used the vulnerability assessment service for our web server & the following was reported by the system "The remote Web server seems to allow any anonymous user to use it as a reverse proxy. This may expose internal services to potential mapping and, henceforth, compromise." ...more >>

I have a Windows2003 server with IIS6.0. However, none of the classic ASP pages are running. I receive 401.3 Access Denied error message. I made sure the internet guest account has read permission (I actually give everyone read permission), and I made sure Active Server Pages under Server Exte...more >>

I've installed a trial cerificate from verisign on my IIS 5. Now when I connect to the server using a browser with http://... it says that the page must be viewed over a secure channel. If I connect with https://... it says that the page cannot be displayed. When I turn off SSL in IIS a...more >>

I am running a w2K ad, And I have just setup a W2003 IIS 6 server that I need to authenticate against my ad. This is working on the older IIS 5 server I am replacing. It is logged into the AD. The strange thing is that if I type in the IP address, I can authenticate, but using the DNS name...more >>

I am writing security policies for IIS 6.0 (Windows 2003 Server) and noticed that IIS tried to write MBSchExt.xml file. Unfortunately, I could not look in the file since the IPS software prevented from writing this file. I cannot find any information on MBSchExt.xml, is this a legitimate IIS...more >>

Server: Windows 2003 Standard with Exchange 2003 I installed an SSL certificate on my Exchange site in IIS and checked "require SSL". Of course this made it impossible to reach the site on port 80 so I changed the TCP port to 8080 and created another site to simply forward the port 80 request ...more >>

Please help ! I build a server from scratch, installed Windows Server 2000 (Service Pack 4), IIS the . NET Framework (version 1.1) and Visual Studio .NET 2003 on it. I used Windows Integrated Security by means of setting up users on Active Directory that is referenced from K2 . NET softwar...more >>